{
    "mode": "man",
    "parameter": "openssl-pkcs7",
    "section": "1",
    "url": "https://www.chedong.com/phpMan.php/man/openssl-pkcs7/1/json",
    "generated": "2026-06-15T14:27:16Z",
    "synopsis": "openssl pkcs7 [-help] [-inform DER|PEM] [-outform DER|PEM] [-in filename] [-out filename]\n[-print] [-printcerts] [-text] [-noout] [-engine id] [-provider name] [-provider-path path]\n[-propquery propq]",
    "sections": {
        "NAME": {
            "content": "openssl-pkcs7 - PKCS#7 command\n",
            "subsections": []
        },
        "SYNOPSIS": {
            "content": "openssl pkcs7 [-help] [-inform DER|PEM] [-outform DER|PEM] [-in filename] [-out filename]\n[-print] [-printcerts] [-text] [-noout] [-engine id] [-provider name] [-provider-path path]\n[-propquery propq]\n",
            "subsections": []
        },
        "DESCRIPTION": {
            "content": "This command processes PKCS#7 files.  Note that it only understands PKCS#7 v 1.5 as specified\nin IETF RFC 2315.  It cannot currently parse CMS as described in IETF RFC 2630.\n",
            "subsections": []
        },
        "OPTIONS": {
            "content": "",
            "subsections": [
                {
                    "name": "-help",
                    "content": "Print out a usage message.\n"
                },
                {
                    "name": "-inform -outform",
                    "content": "The input and formats; the default is PEM.  See openssl-format-options(1) for details.\n\nThe data is a PKCS#7 Version 1.5 structure.\n"
                },
                {
                    "name": "-in",
                    "content": "This specifies the input filename to read from or standard input if this option is not\nspecified.\n"
                },
                {
                    "name": "-out",
                    "content": "Specifies the output filename to write to or standard output by default.\n"
                },
                {
                    "name": "-print",
                    "content": "Print out the full PKCS7 object.\n"
                },
                {
                    "name": "-print",
                    "content": "Prints out any certificates or CRLs contained in the file. They are preceded by their\nsubject and issuer names in one line format.\n"
                },
                {
                    "name": "-text",
                    "content": "Prints out certificate details in full rather than just subject and issuer names.\n"
                },
                {
                    "name": "-noout",
                    "content": "Don't output the encoded version of the PKCS#7 structure (or certificates if -printcerts\nis set).\n"
                },
                {
                    "name": "-engine",
                    "content": "See \"Engine Options\" in openssl(1).  This option is deprecated.\n"
                },
                {
                    "name": "-provider",
                    "content": ""
                },
                {
                    "name": "-provider-path",
                    "content": ""
                },
                {
                    "name": "-propquery",
                    "content": "See \"Provider Options\" in openssl(1), provider(7), and property(7).\n"
                }
            ]
        },
        "EXAMPLES": {
            "content": "Convert a PKCS#7 file from PEM to DER:\n\nopenssl pkcs7 -in file.pem -outform DER -out file.der\n\nOutput all certificates in a file:\n\nopenssl pkcs7 -in file.pem -printcerts -out certs.pem\n",
            "subsections": []
        },
        "SEE ALSO": {
            "content": "openssl(1), openssl-crl2pkcs7(1)\n",
            "subsections": []
        },
        "HISTORY": {
            "content": "The -engine option was deprecated in OpenSSL 3.0.\n",
            "subsections": []
        },
        "COPYRIGHT": {
            "content": "Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.\n\nLicensed under the Apache License 2.0 (the \"License\").  You may not use this file except in\ncompliance with the License.  You can obtain a copy in the file LICENSE in the source\ndistribution or at <https://www.openssl.org/source/license.html>.\n\n\n\n3.0.2                                        2026-06-02                          OPENSSL-PKCS7(1SSL)",
            "subsections": []
        }
    },
    "summary": "openssl-pkcs7 - PKCS#7 command",
    "flags": [
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Print out a usage message."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "The input and formats; the default is PEM. See openssl-format-options(1) for details. The data is a PKCS#7 Version 1.5 structure."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "This specifies the input filename to read from or standard input if this option is not specified."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Specifies the output filename to write to or standard output by default."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Print out the full PKCS7 object."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Prints out any certificates or CRLs contained in the file. They are preceded by their subject and issuer names in one line format."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Prints out certificate details in full rather than just subject and issuer names."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Don't output the encoded version of the PKCS#7 structure (or certificates if -printcerts is set)."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "See \"Engine Options\" in openssl(1). This option is deprecated."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": ""
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": ""
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "See \"Provider Options\" in openssl(1), provider(7), and property(7)."
        }
    ],
    "examples": [
        "Convert a PKCS#7 file from PEM to DER:",
        "openssl pkcs7 -in file.pem -outform DER -out file.der",
        "Output all certificates in a file:",
        "openssl pkcs7 -in file.pem -printcerts -out certs.pem"
    ],
    "see_also": [
        {
            "name": "openssl",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/openssl/1/json"
        },
        {
            "name": "openssl-crl2pkcs7",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/openssl-crl2pkcs7/1/json"
        }
    ]
}